The UK's Legal Aid Agency (LAA) has been hit by a cyber attack that compromised a significant amount of personal data, including criminal records, national insurance numbers, and financial details such as contribution amounts, debts, and payments of individuals who applied for legal aid since 2010. The Ministry of Justice (MoJ) confirmed the breach, which was discovered on April 23 but found to be more extensive than initially thought on May 16. The LAA, responsible for providing legal assistance to those unable to afford it, took the drastic step of shutting down its online digital services to safeguard users. The MoJ is working with the National Crime Agency and the National Cyber Security Centre to investigate the incident and has informed the Information Commissioner's Office. Jane Harbottle, the LAA's chief executive, apologized for the breach, acknowledging the distress it may cause. The group behind the attack claims to have accessed 2.1 million pieces of data, though this figure has not been verified by the MoJ. The compromised data may include contact details, addresses, dates of birth, criminal history, employment status, and financial information. The ministry has advised anyone who applied for legal aid since 2010 to be vigilant for suspicious activity and to update any potentially compromised passwords.